Tenant settings index
This article lists all Fabric tenant settings, along with a brief description of each, and links to relevant documentation, if available. For more information about tenant settings in general, see About tenant settings.
If you want to get to the tenant settings in the Fabric portal, see How to get to the tenant settings.
Microsoft Fabric
| Setting name | Description |
|---|---|
| Data Activator (preview) | Turn on Data Activator Preview to allow users to define a specific set of conditions about their data, and then receive notifications when those conditions are met. After they receive notifications, users can take action to correct the change in conditions. This setting can be managed at both the tenant and the capacity levels. Data Activator is currently available in these regions. When you turn on Data Activator, you agree to the Data Activator Preview terms. Learn More |
| Users can create Fabric items | Users can use production-ready features to create Fabric items. Turning off this setting doesn't impact users’ ability to create Power BI items. This setting can be managed at both the tenant and the capacity levels. Learn More |
| Users can create and use ADF Mount items (preview) | Users can connect and test existing ADF pipelines in Microsoft Fabric. This setting can be managed at both the tenant and the capacity levels. Learn More |
| Users can create Healthcare Cohort items (preview) | Users can explore and create healthcare cohorts using natural language from the multi-modal healthcare data estate provided by the Healthcare solutions item. The data may contain Protected Health Information (PHI). Collaborators with workspace access can view, build on, and modify the healthcare cohort items within that workspace. By turning this setting on, you agree to the Preview Terms. |
| Sustainability solutions (preview) | Turn on this setting to give your tenant users the permission to deploy the Sustainability solutions (preview) and its associated capabilities. Learn More |
| Retail data solutions (preview) | With Retail data solutions, manage retail data at scale to improve customer experience and drive operational efficiency across the organization. Learn More |
| Users can create and use data workflows (preview)(../data-factory/create-apache-airflow-jobs.md) | Data workflows are powered by Apache Airflow and offer an integrated Apache Airflow runtime environment, enabling users to author, execute, and schedule Python DAGs. This setting can be managed at both the tenant and the capacity levels. Learn More |
| API for GraphQL (preview) | Select the admins who can view and change this setting, including any security group selections you've made. |
| User data functions (preview) | Select the admins who can view and change this setting, including any security group selections you've made. |
| Users can create Real-Time Dashboards (preview) | Users can create Real-Time Dashboards that are natively integrated with KQL databases using Kusto Query Language (KQL). This fully integrated dashboard experience provides improved query and visualization performance, and easier data exploration. Learn More |
| SQL Database (preview) | Users can create SQL Databases. Learn More |
| Users can discover and create org apps (preview) | Turn on this setting to let users create org apps as items. Users with access will be able to view them. By turning on this setting, you agree to the Preview Terms. If turned off, any org app items created will be hidden until this setting is turned on again. The prior version of workspace apps will still be available. Learn More |
| Product Feedback | This setting allows Microsoft to prompt users for feedback through in-product surveys within Microsoft Fabric and Power BI. Microsoft will use this feedback to help improve product features and services. User participation is voluntary. Learn More |
| Copy Job (preview) | Users can simply move data from any sources into any destinations without creating a pipeline or dataflow. This setting can be managed at both the tenant and the capacity levels. Learn More |
| Users can create and share AI skill item types (preview) | Users can create natural language data question and answer (Q&A) experiences using generative AI and then save them as AI skill items. AI skill items can be shared with others in the organization. Learn More |
| Mirrored Azure Databricks Catalog (preview) | Turn on this setting to allow users to add Azure Databricks catalogs, schemas, and tables to Fabric workspaces and explore data from Fabric without needing to move data. Learn More |
Help and support settings
| Setting name | Description |
|---|---|
| Publish "Get Help" information | Users in the organization can go to internal help and support resources from the Power BI help menu. |
| Receive email notifications for service outages or incidents | Mail-enabled security groups will receive email notifications if this tenant is impacted by a service outage or incident. |
| Users can try Microsoft Fabric paid features | When users sign up for a Microsoft Fabric trial, they can try Fabric paid features for free for 60 days from the day they signed up. Learn More |
| Show a custom message before publishing reports | When people attempt to publish a report, they'll see a custom message before it gets published. |
Domain management settings
| Setting name | Description |
|---|---|
| Allow tenant and domain admins to override workspace assignments (preview) | Tenant and domain admins can reassign workspaces that were previously assigned to one domain to another domain. |
Workspace settings
| Setting name | Description |
|---|---|
| Create workspaces | Users in the organization can create app workspaces to collaborate on dashboards, reports, and other content. Even if this setting is disabled, a workspace will be created when a template app is installed. |
| Use semantic models across workspaces | Users in the organization can use semantic models across workspaces if they have the required Build permission. |
| Block users from reassigning personal workspaces (My Workspace) | Turn on this setting to prevent users from reassigning their personal workspaces (My Workspace) from Premium capacities to shared capacities. Learn More |
| Define workspace retention period | Turn on this setting to define a retention period during which you can restore a deleted workspace and recover items in it. At the end of the retention period, the workspace is permanently deleted. By default, workspaces are always retained for a minimum of 7 days before they're permanently deleted. Turn off this setting to accept the minimum retention period of 7 days. After 7 days the workspace and items in it will be permanently deleted. Enter the number of days to retain a workspace before it's permanently deleted. My Workspace workspaces will be retained for 30 days automatically. Other workspaces can be retained for up to 90 days. |
Information protection
| Setting name | Description |
|---|---|
| Allow users to apply sensitivity labels for content | With this setting enabled, Microsoft Purview Information Protection sensitivity labels published to users by your organization can be applied. All prerequisite steps must be completed before enabling this setting. Note: Sensitivity label settings, such as encryption and content marking for files and emails, are not applied to content. Learn More Visit the Microsoft Purview compliance portal to view sensitivity label settings for your organization. Note: Sensitivity labels and protection are only applied to files exported to Excel, PowerPoint, or PDF files, that are controlled by "Export to Excel" and "Export reports as PowerPoint presentation or PDF documents" settings. All other export and sharing options do not support the application of sensitivity labels and protection. |
| Apply sensitivity labels from data sources to their data in Power BI | Only sensitivity labels from supported data sources will be applied. Please see the documentation for details about supported data sources and how their sensitivity labels are applied in Power BI. Learn about supported data sources |
| Automatically apply sensitivity labels to downstream content | With this setting enabled, whenever a sensitivity label is changed or applied to Fabric content, the label will also be applied to its eligible downstream content. Learn More |
| Allow workspace admins to override automatically applied sensitivity labels | With this setting enabled, workspace admins can change or remove sensitivity labels that were applied automatically by Fabric, for example, as a result of label inheritance. Learn More |
| Restrict content with protected labels from being shared via link with everyone in your organization | This setting will prevent content with protection settings in the sensitivity label from being shared via link with everyone in your organization. Learn More |
| Increase the number of users who can edit and republish encrypted PBIX files (preview) | Turn on this setting to allow users who've been assigned restrictive sensitivity permissions in the Microsoft Purview compliance portal to open, edit, and publish encrypted PBIX files in Power BI Desktop. Some limitations apply. Learn More |
| Domain admins can set default sensitivity labels for their domains (preview) | Domain admins can set a default sensitivity label for their domains. The label they set will override your organization's default labels in Microsoft Purview, as long as it has a higher priority than the existing default labels set for your tenant. A domain's default label will automatically apply to new Fabric items created within the domain. Reports, semantic models, dataflows, dashboards, scorecards, and some additional item types aren't currently supported. Learn More |
Export and sharing settings
| Setting name | Description |
|---|---|
| External data sharing | Users can share a read-only link to data stored in OneLake with collaborators outside your organization. When you grant them permission to do so, users can share a link to data in lakehouses and additional Fabric items. Collaborators who receive the link can view, build on, and share the data both within and beyond their own Fabric tenants, using their organization's licenses and capacities. Learn More |
| Users can accept external data shares | Users can accept a read-only link to data from another organization’s Fabric tenant. Users who accept an external share link can view, build on, and share the data, both inside and outside of your organization’s tenant. For more information about the security limitations of this preview feature, view the feature documentation. Learn More |
| Guest users can access Microsoft Fabric | Guest users who've been added to your Microsoft Entra directory can access Microsoft Fabric and any Fabric items they have permissions to. Learn More |
| Users can invite guest users to collaborate through item sharing and permissions | Users can collaborate with people outside the organization by sharing Fabric items with them and granting them permission to access those items. After external users accept an invitation, they're added to your Microsoft Entra directory as guest users. Learn More |
| Guest users can browse and access Fabric content | Users can invite guest users to browse and request access to Fabric content. Learn More |
| Users can see guest users in lists of suggested people | With this setting on, users will see both users in your organization and guest users who've been added to your Microsoft Entra directory in lists of suggested people. With this setting off, users will see only users in your organization. Users can still share items with guests by providing their full email address. Learn More |
| Publish to web | People in your org can publish public reports on the web. Publicly published reports don't require authentication to view them. Go to Embed codes in the admin portal to review and manage public embed codes. If any of the codes contain private or confidential content remove them. Review embed codes regularly to make sure no confidential information is live on the web. Learn more about Publish to web |
| Copy and paste visuals | Users in the organization can copy visuals from a tile or report visual and paste them as static images into external applications. |
| Export to Excel | Users in the organization can export the data from a visualization or paginated report to an Excel file. Learn More |
| Export to .csv | Users in the organization can export data from a tile, visualization, or paginated report to a .csv file. Learn More |
| Download reports | Users in the organization can download .pbix files and paginated reports. Learn More |
| Users can work with semantic models in Excel using a live connection | Users can export data to Excel from a report visual or semantic model, or export a semantic model to an Excel workbook with Analyze in Excel, both options with a live connection to the XMLA endpoint. Learn More |
| Export reports as PowerPoint presentations or PDF documents | Users in the organization can export reports as PowerPoint files or PDF documents. |
| Export reports as MHTML documents | Users in the organization can export Paginated reports as MHTML documents. |
| Export reports as Word documents | Users in the organization can export Paginated reports as Word documents. |
| Export reports as XML documents | Users in the organization can export Paginated reports as XML documents. |
| Export reports as image files | Users in the organization can use the export report to file API to export reports as image files. |
| Print dashboards and reports | Users in the organization can print dashboards and reports. |
| Certification | Choose whether people in your org or specific security groups can certify items (like apps, reports, or datamarts) as trusted sources for the wider organization. Note: When a user certifies an item, their contact details will be visible along with the certification badge. |
| Endorse master data (preview) | Choose whether people in your org or specific security groups can endorse items (like lakehouses, warehouses, or datamarts) as one of the core sources for your organization's data records. Learn More Note: When someone endorses an item as master data, their name and email will show with the endorsement badge. |
| Users can set up email subscriptions | Users can create email subscriptions to reports and dashboards. |
| Guest users can set up and subscribe to email subscriptions | Guest users can set up and subscribe to email subscriptions. With this setting off, only users in your organization can set up and subscribe to email subscriptions. Learn More |
| Users can send email subscriptions to guest users | Users can send email subscriptions to guest users. With this setting off, users in your organization can't subscribe guest users to subscription emails. Learn More |
| Featured content | Users in the organization can promote their published content to the Featured section of Power BI Home. |
| Allow connections to featured tables | Users in the organization can access and perform calculations on data from featured tables. Featured tables are defined in the modeling view in Power BI Desktop and made available through data types gallery of Excel. |
| Allow shareable links to grant access to everyone in your organization | This setting will grant access to anyone in your organization with the link. It won't work for external users. Learn More |
| Enable Microsoft Teams integration | This setting allows people in the organization to access features associated with the Microsoft Teams and Power BI integration. This includes launching Teams experiences from the Power BI service like chats, the Power BI app for Teams, and receiving Power BI notifications in Teams. To completely enable or disable Teams integration, work with your Teams admin. |
| Install Power BI app for Microsoft Teams automatically | The Power BI app for Microsoft Teams is installed automatically for users when they use Microsoft Fabric. The app is installed for users if they have Microsoft Teams and the Power BI app is allowed in the Teams Admin Portal. When the app is installed, users receive notifications in Teams and can more easily discover and collaborate with colleagues. The Power BI app for Teams provides users with the ability to open all Fabric content. Learn More. |
| Enable Power BI add-in for PowerPoint | Let people in your org embed Power BI data into their PowerPoint presentations. This integration requires that your organization's Microsoft Office admin has enabled support for add-ins. |
| Allow DirectQuery connections to Power BI semantic models | DirectQuery connections allow users to make changes to existing semantic models or use them to build new ones. Learn More |
| Guest users can work with shared semantic models in their own tenants | Authorized guest users can discover semantic models shared with them in the OneLake data hub (in Power BI Desktop), and then work with these semantic models in their own Power BI tenants. |
| Allow specific users to turn on external data sharing | Turn off this setting to prevent all users from turning on external data sharing. If this setting is on, all or specific users can turn on the external data sharing option, allowing them to share data with authorized guest users. Authorized guest users can then discover, connect to, and work with these shared semantic models in their own Power BI tenants. |
Discovery settings
| Setting name | Description |
|---|---|
| Make promoted content discoverable | Allow users in this org who can promote content to make content they promote discoverable by users who don't have access to it. Learn More |
| Make certified content discoverable | Allow users in the org who can certify content to make content they certify discoverable by users who don't have access to it. Learn More |
| Discover content | Allow users to find and request access to content they don't have access to if it was made discoverable by its owners. Learn More |
App settings
| Setting name | Description |
|---|---|
| Create template organizational apps | Users in the organization can create template apps that use semantic models built on one data source in Power BI Desktop. |
| Push apps to end users | Users can share apps directly with end users without requiring installation from AppSource. |
| Publish apps to the entire organization | Users in the organization can publish apps to the entire organization. |
Integration settings
| Setting name | Description |
|---|---|
| Allow XMLA endpoints and Analyze in Excel with on-premises semantic models | Users in the organization can use Excel to view and interact with on-premises Power BI semantic models. This also allows connections to XMLA endpoints. |
| Semantic Model Execute Queries REST API | Users in the organization can query semantic models by using Data Analysis Expressions (DAX) through Power BI REST APIs. |
| Use ArcGIS Maps for Power BI | Users in the organization can use the ArcGIS Maps for Power BI visualization provided by Esri. |
| Use global search for Power BI | NO DESCRIPTION IN UI |
| Use Azure Maps visual | Users in the organization can use the Azure Maps visualization. |
| Map and filled map visuals | Allow people in your org to use the map and filled map visualizations in their reports. |
| Integration with SharePoint and Microsoft Lists | Users in the organization can launch Power BI from SharePoint lists and Microsoft Lists. Then they can build Power BI reports on the data in those lists and publish them back to the lists. |
| Dremio SSO | Enable SSO capability for Dremio. By enabling, user access token information, including name and email, will be sent to Dremio for authentication. |
| Snowflake SSO | Enable SSO capability for Snowflake. By enabling, user access token information, including name and email, will be sent to Snowflake for authentication. Learn More |
| Redshift SSO | Enable SSO capability for Redshift. By enabling, user access token information, including name and email, will be sent to Redshift for authentication. |
| Google BigQuery SSO | Enable SSO capability for Google BigQuery. By enabling, user access token information, including name and email, will be sent to Google BigQuery for authentication. |
| Microsoft Entra single sign-on for data gateway | Users can use Microsoft Entra single sign-on (SSO) to authenticate to on-premises data gateways and access data sources. With this setting on, user access token information, including names and emails, is sent to data sources to authenticate to the on-premises data gateway service. Learn More |
| Power Platform Solutions Integration (preview) | Allow integration with Power Platform solutions. Learn More |
| Users can view Power BI files saved in OneDrive and SharePoint (preview) | Users in the organization can view Power BI files saved in OneDrive for Business or SharePoint document libraries. The permissions to save and share Power BI files in OneDrive and SharePoint document libraries are controlled by permissions managed in OneDrive and SharePoint. Learn More |
| Users can share links to Power BI files stored in OneDrive and SharePoint through Power BI Desktop (preview) | Users who have saved Power BI files (.pbix) to OneDrive and SharePoint can share links to those files using Power BI Desktop. Learn More |
| Enable granular access control for all data connections | Enforce strict access control for all data connection types. When this is turned on, shared items will be disconnected from data sources if they’re edited by users who don’t have permission to use the data connections. Learn More |
| Semantic models can export data to OneLake (preview) | Semantic models configured for OneLake integration can send import tables to OneLake. Once the data is in OneLake, users can include the exported tables in Fabric items, including lakehouses and warehouses. Learn More |
| Users can store semantic model tables in OneLake (preview) | When users turn on OneLake integration for their semantic models, data imported into semantic model tables can be stored in OneLake. To allow users to turn on OneLake integration for their semantic models, you'll also need to turn on the "Semantic models can export data to OneLake" tenant setting. Learn More |
| Semantic model owners can choose to automatically update semantic models from files imported from OneDrive or SharePoint | Semantic model owners can choose to allow semantic models to be automatically updated with changes made to the corresponding Power BI files (.pbix) stored in OneDrive or SharePoint. File changes can include new and modified data connections. Turn off this setting to prevent automatic updates to semantic models. Learn More |
Power BI visuals
| Setting name | Description |
|---|---|
| Allow visuals created using the Power BI SDK | Users in the organization can add, view, share, and interact with visuals imported from AppSource or from a file. Visuals allowed in the "Organizational visuals" page are not affected by this setting. Learn More |
| Add and use certified visuals only (block uncertified) | Users in the organization with permissions to add and use visuals can add and use certified visuals only. Visuals allowed in the "Organizational visuals" page are not affected by this setting, regardless of certification. Learn More |
| Allow downloads from custom visuals | Enabling this setting will let custom visuals download any information available to the visual (such as summarized data and visual configuration) upon user consent. It is not affected by download restrictions applied in your organization's Export and sharing settings. Learn More |
| AppSource Custom Visuals SSO | Enable SSO capability for AppSource custom visuals. This feature allows custom visuals from AppSource to get Microsoft Entra ID access tokens for signed-in users through the Authentication API. Microsoft Entra ID access tokens include personal information, including users’ names and email addresses, and may be sent across regions and compliance boundaries. Learn More |
| Allow access to the browser's local storage | When this setting is on, custom visuals can store information on the user's browser's local storage. Learn More |
R and Python visuals settings
| Setting name | Description |
|---|---|
| Interact with and share R and Python visuals | Users in the organization can interact with and share visuals created with R or Python scripts. |
Audit and usage settings
| Setting name | Description |
|---|---|
| Usage metrics for content creators | Users in the organization can see usage metrics for dashboards, reports and semantic models that they have appropriate permissions to. Learn More |
| Per-user data in usage metrics for content creators | Usage metrics for content creators will expose display names and email addresses of users who are accessing content. |
| Azure Log Analytics connections for workspace administrators | NO DESCRIPTION IN UI |
| Microsoft can store query text to aid in support investigations | Query text for some items, including semantic models, is securely stored for usage during support investigations. Turn off this setting to stop the service from storing query text. Turning off this setting might negatively impact Microsoft's ability to provide support for the Fabric service. Learn More |
Dashboard settings
| Setting name | Description |
|---|---|
| Web content on dashboard tiles | Users in the organization can add and view web content tiles on Power BI dashboards. Note: This may expose your org to security risks via malicious web content. |
Developer settings
| Setting name | Description |
|---|---|
| Embed content in apps | Users in the organization can embed Power BI dashboards and reports in Web applications using "Embed for your customers" method. Learn More |
| Service principals can use Fabric APIs | Web apps registered in Microsoft Entra ID can use service principals, rather than user credentials, to authenticate to Fabric APIs. To allow an app to use a service principal as an authentication method, the service principal must be added to an allowed security group. Learn More |
| Allow service principals to create and use profiles | Allow service principals in your organization to create and use profiles. |
| Block ResourceKey Authentication | For extra security, block using resource key based authentication. This means users not allowed to use streaming semantic models API using resource key. |
Admin API settings
| Setting name | Description |
|---|---|
| Service principals can access read-only admin APIs | Web apps registered in Microsoft Entra ID can use service principals, rather than user credentials, to authenticate to read-only admin APIs. To allow an app to use a service principal as an authentication method, the service principal must be added to an allowed security group. Service principals included in allowed security groups will have read-only access to all the information available through admin APIs, which can include users' names and emails, and detailed metadata about semantic models and reports. Learn More |
| Enhance admin APIs responses with detailed metadata | Users and service principals allowed to call Power BI admin APIs may get detailed metadata about Power BI items. For example, responses from GetScanResult APIs will contain the names of semantic model tables and columns. Learn More Note: For this setting to apply to service principals, make sure the tenant setting allowing service principals to use read-only admin APIs is enabled. Learn More |
| Enhance admin APIs responses with DAX and mashup expressions | Users and service principals eligible to call Power BI admin APIs will get detailed metadata about queries and expressions comprising Power BI items. For example, responses from GetScanResult API will contain DAX and mashup expressions. Learn More Note: For this setting to apply to service principals, make sure the tenant setting allowing service principals to use read-only admin APIs is enabled. Learn More |
Gen1 dataflow settings
| Setting name | Description |
|---|---|
| Create and use Gen1 dataflows | Users in the organization can create and use Gen1 dataflows. Learn More |
Template app settings
| Setting name | Description |
|---|---|
| Publish template apps | Users in the organization can publish template apps for distribution to clients outside of the organization. Learn More. |
| Install template apps | Users in the organization can install template apps created outside the organization. When a template app is installed, an upgraded workspace is created. Learn More |
| Install template apps not listed in AppSource | Users in the organization who have been granted permission to install template apps which were not published to Microsoft AppSource. Learn More. |
Q&A settings
| Setting name | Description |
|---|---|
| Review questions | Allow semantic model owners to review questions people asked about their data. |
| Synonym sharing | Allow people to share Q&A synonyms with your organization. Learn More |
Semantic Model Security
| Setting name | Description |
|---|---|
| Block republish and disable package refresh | Disable package refresh, and only allow the semantic model owner to publish updates. |
Advanced networking
| Setting name | Description |
|---|---|
| Azure Private Link | Increase security by allowing people to use a Private Link to access your Fabric tenant. Someone will need to finish the set-up process in Azure. If that's not you, grant permission to the right person or group by entering their email. Learn More Set-up instructions Review the considerations and limitations section before enabling private endpoints. |
| Block Public Internet Access | For extra security, block access to your Fabric tenant via the public internet. This means people who don't have access to the Private Link won't be able to get in. Keep in mind, turning this on could take 10 to 20 minutes to take effect. Learn More Set-up instructions |
Metrics settings
| Setting name | Description |
|---|---|
| Create and use Metrics | Users in the organization can create and use Metrics |
User experience experiments
| Setting name | Description |
|---|---|
| Help Power BI optimize your experience | Users in this organization will get minor user experience variations that the Power BI team is experimenting with, including content, layout, and design, before they go live for all users. |
Share data with your Microsoft 365 services
| Setting name | Description |
|---|---|
| Users can see Microsoft Fabric metadata in Microsoft 365 | Turn on this setting to store and display certain Microsoft Fabric metadata in Microsoft 365 services. Users might see Microsoft Fabric metadata (including content titles and types or open and sharing history) in Microsoft 365 services like search results and recommended content lists. Metadata from Microsoft Fabric semantic models will not be displayed. Users can browse or get recommendations only for content they have access to. Learn More This setting is automatically enabled only if your Microsoft Fabric and Microsoft 365 tenants are in the same geographical region. You may disable this setting. Where is my Microsoft Fabric tenant located? |
Insights settings
| Setting name | Description |
|---|---|
| Receive notifications for top insights (preview) | Users in the organization can enable notifications for top insights in report settings |
| Show entry points for insights (preview) | Users in the organization can use entry points for requesting insights inside reports |
Datamart settings
| Setting name | Description |
|---|---|
| Create Datamarts (preview) | Users in the organization can create Datamarts |
Data model settings
| Setting name | Description |
|---|---|
| Users can edit data models in the Power BI service (preview) | Turn on this setting to allow users to edit data models in the service. This setting doesn't apply to DirectLake semantic models or editing a semantic model through an API or XMLA endpoint. Learn More |
Scale-out settings
| Setting name | Description |
|---|---|
| Scale out queries for large semantic models | For semantic models that use the large semantic model storage format, Power BI Premium can automatically distribute queries across additional semantic model replicas when query volume is high. |
OneLake settings
| Setting name | Description |
|---|---|
| Users can access data stored in OneLake with apps external to Fabric | Users can access data stored in OneLake with apps external to the Fabric environment, such as custom applications created with Azure Data Lake Storage (ADLS) APIs, OneLake File Explorer, and Databricks. Users can already access data stored in OneLake with apps internal to the Fabric environment, such as Spark, Data Engineering, and Data Warehouse. Learn More |
| Use short-lived user-delegated SAS tokens (preview) | OneLake SAS tokens enable applications to access data in OneLake through short-lived SAS tokens, based on a Microsoft Fabric user’s Entra identity. These token’s permissions can be further limited to provide least privileged access and cannot exceed a lifetime of one hour. Learn More |
| Authenticate with OneLake user-delegated SAS tokens (preview) | Allow applications to authenticate using a OneLake SAS token. Fabric users can create OneLake SAS by requesting a user delegation key. The tenant setting, Use short-lived user delegated SAS tokens, must be turned on to generate user delegation keys. The lifetimes of the user delegation keys and SAS tokens cannot exceed one hour. Learn More Note: This setting controls functionality that will be available in future. This setting is turned off by default, and when the functionality is available, workspace admins can turn on SAS authentication for their workspace. |
| Users can sync data in OneLake with the OneLake File Explorer app | Turn on this setting to allow users to use OneLake File Explorer. This app will sync OneLake items to Windows File Explorer, similar to OneDrive. Learn More |
Git integration
| Setting name | Description |
|---|---|
| Users can synchronize workspace items with their Git repositories | Users can import and export workspace items to Git repositories for collaboration and version control. Turn off this setting to prevent users from syncing workspace items with their Git repositories. Learn More |
| Users can export items to Git repositories in other geographical locations | The workspace and the Git repository may reside in different geographies. Turn on this setting to allow users to export items to Git repositories in other geographies. |
| Users can export workspace items with applied sensitivity labels to Git repositoriesv | Turn on this setting to allow users to export items with applied sensitivity labels to their Git repositories. |
| Users can sync workspace items with GitHub repositories | Users can select GitHub as their Git provider and sync items in their workspaces with GitHub repositories. |
Copilot and Azure OpenAI Service
| Setting name | Description |
|---|---|
| Users can use Copilot and other features powered by Azure OpenAI | When this setting is enabled, users can access the features powered by Azure OpenAI, including Copilot. This setting can be managed at both the tenant and the capacity levels. Learn More For customers in the EU Data Boundary, this setting adheres to Microsoft Fabric's EU Data Boundary commitments. Learn More By enabling this setting, you agree to the Preview Terms. |
| Data sent to Azure OpenAI can be processed outside your capacity's geographic region, compliance boundary, or national cloud instance | This setting is only applicable for customers who want to use Copilot and AI features in Fabric powered by Azure OpenAI, and whose capacity's geographic region is outside of EU Data Boundary and US. Learn More When this setting is enabled, data sent to Azure OpenAI can be processed outside your capacity's geographic boundary or national cloud boundary. This setting can be managed at both the tenant and the capacity levels. Learn More By enabling this setting, you agree to the Preview Terms. |
Additional workloads
| Setting name | Description |
|---|---|
| Capacity admins and contributors can add and remove additional workloads | Capacity admins or individuals granted Contributor permissions in Capacity settings can add and remove additional workloads in capacities. If a workload is removed, users will no longer be able to work with items created with the workload. When users interact with a workload, their data and access tokens, including name and email, are sent to the publisher. Sensitivity labels and protection settings including encryption aren't applied to items created with workloads. Learn More |
| Capacity admins can develop additional workloads | Capacity admins can develop additional workloads. Turn on to allow developers to connect to capacity with a local machine development environment. Turning off this feature will prevent developers from connecting to the Fabric capacity. Learn More |
| Users can see and work with additional workloads not validated by Microsoft | Turn on this setting to allow users to see and work with additional workloads not validated by Microsoft. Make sure that you only add workloads from publishers that you trust to meet your organization’s policies. Learn More |